Ubuntu touch

This hub aggregates every CVE we track for Ubuntu touch, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Ubuntu touch.

• CVE-2022-40297UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, far below typical length/complexity for a user account's ...7.8Sep 8, 2022
• CVE-2014-1423Online Accounts Signon daemon gives out all oauth tokens to any app5.9May 7, 2020
• CVE-2017-6507An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly hav...5.9Mar 24, 2017
• CVE-2016-1575The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid dir...7.8May 2, 2016
• CVE-2016-1576The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top...7.8May 2, 2016
• CVE-2015-8325The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows l...7.8May 1, 2016